Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RR18M-Gduyiz0FoRL6udBGUbtSE.roa
File: RR18M-Gduyiz0FoRL6udBGUbtSE.roa (raw, json)
Hash identifier: brVBE27eXxg39CQvwe465fkTmAyCGndyq4Ef0qD+5Bc=
Subject key identifier: 45:1D:7C:33:E1:9D:BB:28:B3:D0:5A:11:2F:AB:9D:04:65:1B:B5:21
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01883FC6120D1D4FABE3BD5691821D2D8C1A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RR18M-Gduyiz0FoRL6udBGUbtSE.roa
Signing time: Sun 21 May 2023 19:25:25 +0000
ROA not before: Sun 21 May 2023 19:25:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 84.32.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:c6:12:0d:1d:4f:ab:e3:bd:56:91:82:1d:2d:8c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 21 19:25:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=451d7c33e19dbb28b3d05a112fab9d04651bb521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:1a:04:5e:b4:a2:5a:73:10:27:10:e4:3f:
63:74:23:e3:3e:b3:6c:1f:29:8c:38:8f:60:4b:4d:
10:9c:6a:b3:02:16:7b:32:53:85:4b:d1:12:68:cd:
7b:79:6b:7a:c7:4d:bb:c2:63:22:72:60:c6:8b:a8:
f3:8f:3c:63:2e:85:90:a3:ca:ec:7c:d1:7a:ea:eb:
e6:53:1c:0a:db:b3:3a:27:d1:db:5d:85:82:8c:54:
83:49:98:3f:e6:22:b1:6b:39:c1:3b:a6:0b:24:05:
33:f7:9e:a7:f0:2f:4f:a0:5e:a3:94:db:4d:43:ce:
3a:fd:d1:07:1b:b1:b6:85:d9:fa:0c:42:23:b7:b4:
76:a0:13:5d:f3:c5:73:00:cc:04:b5:e1:2d:4e:57:
c0:0a:e8:03:5b:b7:29:c9:dc:02:4e:69:0a:55:0a:
e3:fe:ca:c3:af:a2:15:6b:92:85:f9:e8:f6:14:08:
39:1c:80:d4:27:5f:15:23:fc:7a:c5:c6:b1:11:ef:
3d:69:ee:e7:b1:dc:ee:03:b7:aa:e5:2f:53:15:81:
81:73:33:24:12:d7:87:89:bb:c4:cf:3f:55:1f:a8:
99:73:2e:d3:ab:f1:5f:a0:66:f1:45:21:b0:3b:e9:
8c:d8:00:fa:93:8a:54:c0:4a:78:38:2a:38:9c:4f:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:7C:33:E1:9D:BB:28:B3:D0:5A:11:2F:AB:9D:04:65:1B:B5:21
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/RR18M-Gduyiz0FoRL6udBGUbtSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.157.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c5:39:3b:d9:16:8c:41:41:dc:86:69:6e:56:f9:45:d9:9f:
1b:5a:17:f9:3f:53:7d:7f:d9:a7:fc:31:a2:dd:ec:0b:bc:51:
4c:44:cb:37:d2:64:46:dd:a5:9b:19:b4:ed:be:6b:e0:de:b8:
60:ea:04:97:fa:2d:a4:25:c5:90:6f:93:a4:80:e3:9a:19:8e:
72:27:82:80:33:8e:35:d7:89:74:94:3a:71:82:29:f5:10:36:
ec:47:4c:df:e3:1e:79:30:6c:2f:3b:7b:74:b4:30:0a:1d:66:
84:0d:dc:30:e0:da:53:08:b8:ac:aa:a4:46:60:8d:3b:e6:19:
fb:6a:38:d7:eb:d4:53:e6:ba:b3:34:6a:09:40:68:d6:d3:52:
72:72:5e:ff:a1:de:94:25:30:f5:97:bf:d5:bd:42:fd:6d:51:
8e:e2:80:64:d5:e5:2a:7d:57:d8:71:27:89:88:04:a6:eb:cb:
bc:98:bf:49:b4:5a:33:5e:68:f3:f2:84:85:79:61:91:fb:b6:
9f:5f:5e:98:e0:c2:c4:59:5b:fd:60:e5:ab:6a:6a:89:02:64:
60:da:60:62:42:e4:ff:ee:16:95:55:79:5d:12:d7:16:2e:75:
e1:a5:2b:ab:46:7a:66:75:eb:85:ef:d2:65:7c:4e:54:9d:24:
4a:50:7b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:29 2023 by rpki-client on console-ams.rpki-client.org